Enable security on Kibana query panel

We need to allow or disallow the direct editing of Kibana query
panel, based on the Kibana JSON configuration.

This is done by introducing the 'editable' attribute on the services.query
JSON object consistently to what is currently possible with the other panels.

If the attribute is not present (default behaviour) the query panel
is completely editable and the '+' icon allows to add new queries.